Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services...

TitleNamePosition

Dealing with your GDPR ChallengesNadia LiapiDirector, Governance, Risk & Compliance ServicesCertified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor,

ITIL Service Operations Professional Classification ISO 27001: Public

2 Space Hellas - All Rights Reserved

Agenda

GDPR in 1 minute

9 steps to GDPR

A few words for Space Hellas KEEPCALMAND

PREPARE FOR

THE GDPR

GDPR in 1 minute

Time until GDPR Enforcement:

36 daysAfter four years of preparation

and debate the GDPR was

finally approved by the

EU Parliament on 14

April 2016. Enforcement

date: 25 May 2018

The EU General Data

Protection Regulation

(GDPR) is the most

important change in data

privacy regulation

in 20 years - we're here to

make sure you're prepared

Space Hellas – All rights reserved

4 Space Hellas - All Rights Reserved

Raise Awareness

1Explain the Regulation / Give examples

Hold a kick off meeting and …

Make sure that people

understand

what needs to be

done / their involvement

Gain people’s trust / Their commitment

5 Space Hellas - All Rights Reserved

Carry out an Audit

2

a. Audit key people

b. Audit IT systems &

procedures

c. Audit access rights

d. Perform a

Vulnerability

Assessment

e. Perform a Penetration

Test

6 Space Hellas - All Rights Reserved

Detect and Assess the Risks

3 Identify Risks to ALL activities / Identify high risk activities / Perform DPIAs

7 Space Hellas - All Rights Reserved

Identify all Required Measures to Achieve Compliance

4

Document Internal Audit Findings / Have a Compliance Plan / Schedule the implementation

of measures / Appoint people responsible

8 Space Hellas - All Rights Reserved

Identify your Joint Controllers, Processors & Sub-Processors

5 Choose the right processors!

9 Space Hellas - All Rights Reserved

Review and Update Contracts and Privacy Policies

6 • Review contracts / NDAs

• Send questionnaires

• Perform Audits

10 Space Hellas - All Rights Reserved

Appoint a Data Protection Officer (DPO)

7 … if needed! Make sure he or she have the right skills, both professional and personal!

Make sure everybody in your organization knows who the DPO is.

Make sure people can contact him/her easily!

11 Space Hellas - All Rights Reserved

Benefit from the One-Stop-Shop Supervisory Mechanism

8

12 Space Hellas - All Rights Reserved

Inform and Enforce

9 • Training / Awareness / Audits * Measure / Improve

13 Space Hellas - All Rights Reserved

GDPR Compliance or not?

14 Space Hellas - All Rights Reserved

A few words for our GDPR customers

15 Space Hellas - All Rights Reserved

Information Security & Data Protection Customers

?

Digital Marketing

Education

Shipping

Industries

Software

Research Institutes -

Health

Thank you and always remember

Space Hellas is your trusted partner

TRUSTtakes years to build

seconds to break and

forever to repair…